False Positive

[Namita]

Appears Browser Guard (in this instance on Firefox) is having a False Positive on website: aaroh.info

VirusTotal shows all clean: https://www.virustotal.com/gui/url/3b61664e837b385c5666601251c6d30bbb7b2b25ab274579db40df16a7d75f0d/detection

As said here (https://forums.malwarebytes.com/topic/253405-extension-blocking-tld/?do=findComment&comment=1343777) :

Quote

Unfortunately the .info as well as many other gTLD sites are very well known for being used for sites designed to phish or attack user computers and are thus all blocked without a report as a FP

It's totally unacceptable and everyone would agree to this users statement (https://forums.malwarebytes.com/topic/252629-why-is-my-website-blocked/?do=findComment&comment=1339923):

Quote

This seems to be in inappropriate policy as it can cause reputational damage to legitimate businesses and is likely to deter people from doing business with any web site blocked in this way. The onus is surely on Malwarebytes to only block a web site for real dangers rather than blocking sites and putting the onus on web site owners to complain to you in order to get an all clear. You do not even have the courtesy to explain to visitors the real reason for your block.

I object highly to having my web site described as potentially containing scam activity. Have you looked at the legal implications of this as my first reaction would be to sue you for loss of business and damage to reputation? In the case of this particular domain, the web site is just a holding site and not an important commercial site, so damage is minimal. However, I suggest you rapidly change this blanket policy before real damage is done.

Fix this policy or it will create serious trouble for you guys soon.

 

[AdvancedSetup]

I have requested the team review and remove the block. Please note the following though.

TLS Recommendations

HTTPS version of this website is not accessible: Unknown TLS certificate issuer. Please consider setting up HTTPS to avoid the "Not Secure" browser warning.

 

[gonzo]

Site has been whitelisted.

[AdvancedSetup]

Confirmed. Site is no longer blocked for me. Thanks @gonzo

 

[redwolfe_98]

i don't see why the URL was whitelisted. it is not shown to be used for any legitimate purpose. you could have just whitelisted a URL that will be used for distributing malware.

[AdvancedSetup]

And if it turns out to be doing such in the future we will restorer the block. In it's current state the site does not pose a threat.

Thank you

 

[Namita]

Thanks @AdvancedSetup